Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

When I open an internet browser (Firefox or internet explorer) there is an error message concerning the proxy settings. Additionally it is not possible to update my anti virus and firewall. However, Outlook is running normal and in the windows 7 it looks that there is a normal connection to the internet.When I change the Firefox settings to no proxy, which is not the usual setting I think, Firefox is working properly. A second computer in the same network is running normal with the stadard Firefox settings: "use proxy settings from the system".

Last time I had to reinstall the complete system because of some some systems errors (blue screen), which were no surely related to the maleware removal. Hopefully this is not the case again.

I already used adwcleaner and removed some things. If you are interested I could post the log.

Before we begin, please read and follow these important guidelines, so things will proceed smoothly.

The instructions being given are for YOUR computer and system only!Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!

You must have Administrator rights, permissions for this computer.

DO NOT run any other fix or removal tools unless instructed to do so!

DO NOT install any other software (or hardware) during the cleaning process until we are done as well as DO NOT Remove, or Scan with anything on your system unless I ask. This adds more items to be researched. Extra Additions and Removals of files make the analysis more difficult.

Only post your problem at (1) one help site. Applying fixes from multiple help sites can cause problems.

Print each set of instructions if possible - your Internet connection will not be available during some fix processes.

Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.

Only reply to this thread, do not start another one. Please, continue responding, until I give you the "All Clean!" Absence of symptoms does not mean that everything is clear.

I am currently reviewing your logs and will return, as soon as possible, with additional instructions. In the meantime...

Please read all instructions carefully before executing and perform the steps, in the order given.lf you have any questions or problems executing these instructions, <<STOP>> do not proceed, post back with the question or problem.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Step 1.For safety reason (to have a good registry to restore if needed), I will ask you to create a System Restore Point (SRP) before most of my instructions sets...Create a System Restore Point

Right-click on Computer and select Properties.

In the left pane under Tasks please click System protection.If UAC prompts for an administrator password or approval, type the password or give your "permission to continue".

Select System Protection, then choose Create.

In the System Restore dialog box, type a description for the restore point and then click Create again.A window will pop up with "The Restore Point was created successfully" confirmation message.

Click OK, then close the System Restore dialog.

If you have successfully created a System Restore Point... we can proceed.If you have NOT successfully created a System Restore Point... do not go any further!Please post back so we can determine why it was unsuccessful.

Step 2.Remove Program(s)

Click on Start, then click the Start Search box on the Start Menu.

Click on 'Select all', then copy and paste the value below into the open text entry box:

The first thing you need to do is print out How-To-Use-ComboFix. Read these instructions thoroughly. You will not have Internet access when you execute ComboFix.Please disable any Antivirus or Firewall you have active, as shown in this topic. Close all open application windows.

Press I Agree to the Disclaimer prompt.ComboFix screen appears... preparing to run. ComboFix will now begin creating a System Restore Point and then backup your registry.Do Not use your keyboard or mouse click anywhere in the ComboFix window, as this may cause the program to stall or crash!ComboFix may reboot your computer allow this and follow all directions given.When finished... Notepad will open ... ComboFix will produce a log file called "ComboFix.txt".

Please copy/paste the contents of ComboFix.txt... in your next reply.

Do NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is a powerful tool intended by its creator to be used under the guidance and supervision of an expert, NOT for general public or personal use. Using this tool incorrectly could lead to serious problems with your operating system such as preventing it from ever starting again.This site, sUBs and myself will not be responsible for any damage caused to your machine by misusing or running ComboFix on your own. Please read Combofix's Disclaimer.

** Enable your Antivirus and Firewall, before connecting to the Internet again! **

Step 5.OTL - DownloadPlease download OTL.exe by Old Timer and save it to your Desktop.

OTL - ScanImportant! Close all applications and windows so that you have nothing open and are at your Desktop.

Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.

Under Output, ensure that Standard Output is selected.

Check the boxes labeled:

Include 64 bit scans

Scan All Users

LOP check

Purity check

Extra Registry > Use SafeList

Click on Run Scan at the top left hand corner.

When done, two Notepad files will open.

OTL.txt <-- Will be opened, maximized

Extras.txt <-- Will be minimized on task bar.

Please post the contents of both OTL.txt and Extras.txt files in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of the ComboFix.txt log file

Contents of a OTL.txt log file

Contents of a Extras.txt log file

Do you see any changes in computer behavior?

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Shut down your protection software as shown in This topic now to avoid potential conflicts.

Right click on JRT.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log file JRT.txt is saved to your desktop and will automatically open.

Please post the contents of JRT.txt into your next reply.

Step 4.SystemLookPlease download SystemLook_x64.exe by jpshortstuff and save it to your Desktop.

Right click on SystemLook_x64.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.

Highlight and copy the following entries: into SystemLook's main text entry window. (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)

Press the Look button to start the scan. Please be patient - it may take a while...When finished, a Notepad window will open with the results of the scan. A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt

Please post the contents of the SystemLook.txt file in your next reply.

Allow the download if prompted by your security software and please close all your programs.

Right click on RogueKiller.exe and select "Run as administrator..." to run it.

If it does not run, please try a few times.

Wait for PreScan to finish, then click on Scan.

Once completed, a log called RKreport[1].txt will be created on the desktop. It can also be accessed via the Report button.

Please copy and paste the contents of that log in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run

Contents of the AdwCleaner[Sn].txt log file

Contents of the JRT.txt log file

Contents of the SystemLook.txt log file

Contents of the RKreport[1].txt log file

Do you see any changes in computer behavior?

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Files\Folders moved on Reboot...C:\Users\Helmut\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Place a checkmark next to each of these items, leave the others unchecked.

Now press the Delete button.

Once completed, a log called RKreport[1].txt will be created on the desktop. It can also be accessed via the Report button.

Please copy and paste the contents of that log in your next reply.

Step 3.Fresh OTL ScanYou should still have OTL.exe on your desktop.Important! Close all applications and windows so that you have nothing open and are at your Desktop.

Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.

Under Output, ensure that Standard Output is selected.

Check the boxes labeled:

Include 64 bit scans

Scan All Users

Processes > All<- Important

Modules > All<- Important

Extra Registry > Use SafeList

LOP check

Click on Run Scan at the top left hand corner.

When done, one Notepad file OTL.txt <-- Will be opened, maximized

Please post the content of OTL.txt file ONLY in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter. Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:

Do you have any problems executing the instructions?

Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run

Contents of the RKreport[1].txt log file

Contents of a OTL.txt log file after OTL fresh scan

Do you see any changes in computer behavior?

Thanks,pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.